GRC continuous monitoring

GRC continuous monitoring

GRC continuous monitoring

Continuous monitoring involves activities related to identifying and creating key risk
and controls indicators. Supporting information can be collected for those indicators through
automatic data collection or manual tasks. Indicator results are then used to create issues for
controls, update risk scores, and provide supporting information for audit activities and control
testing.

Indicators

Indicators collect data to monitor controls and risks, and collect audit evidence. Indicators
monitor a single control or risk.

Indicator templates

Indicator templates allow the creation of multiple indicators for similar controls or
risks.